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CLAIMS 

1. System for access to a packet switching network (4) 
suitable for implementing a simplified signature method, this 
system comprising: 

- a proxy server (50) through which all the data flows pass 
which are exchanged between a user and the network, 

- a plurality of service providers (20, 22) which are 
connected to the network (4) , each service provider being 
capable of transmitting an authentication request to the user 
who contacts it in order to identify and/or authenticate this 
user before providing him with personalised and/or secure 
services, the response to be provided by the same user to 
this authentication request being able to be different in 
accordance with the service provider contacted, 

- at least one authentication server (24, 26) which is 
capable of storing at least one item of authentication data 
for each user and transmitting, in response to an 
authentication request, an authentication response which 
contains an item of authentication data in accordance with 
both the service provider who transmitted the authentication 
request and the identity of the user who contacted this 
service provider, and 

- a simplified signature module (66) which is capable of 
automatically processing on behalf of the user the 
authentication requests transmitted by the service providers 
contacted, this module being capable for each user: 

- of directing the authentication requests to the appropriate 
authentication server (24, 26) , and 

- of transmitting to the service provider the corresponding 
authentication response transmitted by the appropriate 
authentication server. 



characterised in that it comprises a supplementary server (60) 
which is independent from the proxy server (50) , the 
simplified signature module (66) being implemented in this 
supplementary server (60) , and in that the proxy server (50) 
is provided with an interface (64) which allows it to be 
connected to the supplementary server (60) and allows at 
least the authentication requests transmitted by the service 
providers contacted to be transmitted to the supplementary 
server (60) in order to process these requests using the 
simplified signature module (66) . 

2. System according to claim 1, characterised in that the 
simplified signature module (66) comprises a sub-module (70) 
which is capable of identifying the user from his network 
address and adding an identifier of the user to the 
authentication requests directed to the authentication 
servers . 

3. System according to any one of the preceding claims, 
characterised in that the at least one item of authentication 
data stored for each user comprises an item of data relating 
to a level of authentication available for this user, in that 
each authentication request transmitted by a service provider 
(20, 22) specifies features relating to the authentication 
level required by this service provider in order to be able 
to access the services it provides, in that the or each 
authentication server (24, 26) is capable of comparing the 
features relating to the required authentication level 
specified by the authentication request with the data 
relating to the authentication level available in order to 
determine whether the authentication level required 
corresponds to the authentication level available for this 
user, and in that the or each authentication server (24, 26) 



is capable of transmitting to the user an active 
authentication request which is capable of activating an 
interactive process for identification and/or authentication 
of the user if the authentication level required does not 
correspond to the authentication level available. 

4. System according to claim 3, characterised in that the 
supplementary server (60) comprises a sub-module (72) which 
is capable of directing the response of the user to the 
active authentication requests to the authentication server 
which has transmitted it . 

5. System according to claim 3 or 4, characterised in that 
the supplementary server comprises a sub-module (70) which is 
capable of directing the active authentication request to the 
user - 

6. System according to any one of the preceding claims, 
characterised in that the simplified signature module (66) 
comprises a sub-module (68) which is capable of adding, to 
the requests transmitted by the user to a service provider, 
an identification signal of a simplified signature service, 
in response to which the service provider transmits the 
authentication request. 

7. System according to any one of the preceding claims, 
characterised in that the supplementary server (60) and the 
proxy server (50) are capable of communicating with each 
other using a Hyper Text Transfer Protocol (HTTP) . 

8. System according to claim 7, characterised in that the 
Hyper Text Transfer Protocol is the iCAP protocol (Internet 



Content Adaptation Protocol) or the OCP protocol (OPES Call 
Out Protocol) . 

9. System according to claim 7 or 8 , characterised in that 
the supplementary server (60) is capable of communicating 
with the service providers only by means of the Hyper Text 
Transfer Protocol used between it and the proxy server (50) . 

10. System according to any one of claims 1 to 8, 
characterised in that the supplementary server (60) also 
implements an HTTP (Hyper Text Transfer Protocol) server 
and/or client in order to communicate directly with the or 
each service provider and/or the or each authentication 
server using only the HTTP protocol. 

11. System according to any one of the preceding claims, 
characterised in that it comprises a provider (12) of access 
to the network (4) to which the user must be connected in 
order to be able to access the network, this access provider 
being provided with the proxy server (50) . 

12. System according to any one of the preceding claims, 
characterised in that the network is the World Wide Web. 

13 . Supplementary server which is capable of being used in a 
system according to any one of the preceding claims, 
characterised in that it comprises the simplified signature 
module (66) which is capable of automatically processing on 
behalf of the user the authentication requests transmitted by 
the or each service provider contacted, and is capable of 
communicating with a proxy server (50) in order to receive at 
least the authentication requests transmitted by the service 
providers . 



